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FAMILIES OF CURVES AND WEIGHT DISTRIBUTIONS OF CODES 

RENE SCHOOF 

Abstract. In this expository paper we show how one can, in a uniform way, 
calculate the weight distributions of some well-known binary cyclic codes. The 
codes are related to certain families of curves, and the weight distributions are 
related to the distribution of the number of rational points on the curves. 



1. Introduction 

Let F q be a finite field with q elements. A code over F q is simply a linear 
subspace 

C c PJ. 

The most natural and interesting codes are binary, i.e. they are codes over F2 . 
These codes are the principal object of study in this paper, but we will also en- 
counter codes over extension fields of F2 . 

Around 1980 the Russian mathematician and engineer V.G. Goppa discovered 
a beautiful connection between codes and algebraic curves over finite fields. He 
obtained a very general method to construct codes from certain linear systems on 
algebraic curves. 

In this expository paper we discuss a different relation between codes and al- 
gebraic curves. We study certain families of binary codes whose words are para- 
metrized by algebraic curves. These codes are very classical, and many of their 
properties are derived in the famous book by Mac Williams and Sloane [8]. There 
the methods are of a combinatorial nature. Our approach is entirely geometric. 
We encounter elliptic curves and Hecke operators for the modular group Ti(4) . 
Our intended reader has some familiarity with the theory of elliptic curves and is 
not supposed to know anything about coding theory, so we will explain some very 
well-known coding theoretical concepts and say nothing about some deep results 
concerning elliptic curves over finite fields. 

The elements of a code are called code words; the dimension n is called the 
length of the code. The weight |v| of a code word v = (vi , v 2 , . . . , v n ) is defined 

by 

|v| - #{z : Vi + 0}. 

Coding theorists are usually interested in codes which are "good", i.e. for which 

the minimum distance 

d = min{|v| : ve C, v ^ 0} 

is large with respect to dim(C) . In this paper we do not take this point of view. 
We merely investigate the distribution of the weights in a given code. 
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An easy example of a binary code is the repetition code, which consists of the zero 
vector and the vector (1,1,... , 1) . It has length n , dimension 1, and minimum 
distance d = n . Another example is the parity check code, 

n 

P = {veFJ :£> = ()}. 

i=0 

It has length n , dimension n — 1 , and minimum distance d = 2 . 

An invariant of a code C which is finer than the minimum distance is its weight 
distribution. It is the function 

A, = #{v G C : |v| = i}, 0<i<n, 

and it is often given in terms of a polynomial, the weight enumerator Wc(X) G 
Z[X}: 

n 

W C {X) = Y, A ^ > 

i=0 

The minimum distance is the smallest integer d > for which Ad ^ . The weight 
enumerator is the finite analogue of the ^-series associated to an integral lattice in 
Euclidean space. 

It is clear that all these notions depend in an essential way on the basis of the 
vector space F£ . Changing the basis changes everything. Only permuting the 
basis vectors does not change the code "in an essential way" . 

Determining the weight distribution of a code is, in general, a difficult task. 
In this paper we discuss four families of codes for which, luckily, one is able to 
determine the weight distributions. These codes all belong to a classical, well- 
studied class of codes: they are all cyclic. 

Definition. A cyclic code I is an ideal 

/cF 2 [r]/(r-i), 

where the vector space F2 [T]/(T" — 1) is equipped with the F2-basis consisting of 
the monomials 1 , T , . . . , T n ~ x . In other words, the coordinates (vq , Vi , . . . , v n -\ 
of the code words in I are simply the coefficients of the polynomials v + v\T + 
••• + «„_ 1 T"- 1 £F 2 [T]/(r-l). 

The codes I are called cyclic since the word (v\ , . . . , v n -\ , vq) is contained 
in I whenever (v , vi , . . . , v n -\) G I . 

For instance, taking for / the ideal generated by the polynomial T — 1 , we find 

I = {v + Vl T + ■ ■ ■ + G F 2 [T]/(T" - 1) : «o + «! + ■■■ + «„_! - 0}. 

This is precisely the parity check code P. One verifies easily that the ideal generated 

by the polynomial T™ _1 H h T + 1 is simply the repetition code. 

Another example is the family of Hamming codes H: let n = q — 1 where q = 2 m 
for some m > 2 . Then 

H m cF 2 [T]/(T«- 1 -l) 

is the ideal generated by the minimum polynomial f a (T) G F 2 [T] of a G F* where 
a is a generator of the multiplicative group F* . We will see later that, in a precise 
sense, the codes do not depend on the choice of a . 
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In this paper we consider for m > 2 the so-called double error correcting BCH 
code 

B m cF 2 [T]/(T«- 1 -l); 

this is the ideal generated by the product fa(T)f a s(T) . Finally we consider the 
Melas codes 

M m cF 2 [T]/(T«- 1 -l), 

which are the ideals generated by the product f a (T)f a -i(T) . 

It is, of course, perfectly possible to study weight distributions without ever 
speaking about codes. The weight distribution of a cyclic code I simply carries 
information about the number of polynomials in the ideal I with a given number 
of non-zero coefficients. For instance, for a cyclic code I of length n one has that 

Ai = #{/ € / : deg(/) < n and / has precisely i non- vanishing coefficients}. 

In this paper we determine the weight distributions of the codes *P , Sj m , 25 m , 
and 9Jt m . None of this is new. For the codes *P , f) m , and <8 m the results can 
be found in the book by Mac Williams and Sloane [8]; the Melas codes 9Jt m are 
dealt with in [12]. The algebraic geometric approach, however, is different from the 
discussion in [8]. We relate the codes Sj m , 5B m , and Wl m to certain families of 
curves and their weight distributions to the distribution of the number of rational 
points on the curves in the family. 

In section 2 we explain the MacWilliams Identities, relating the weight distri- 
bution of a code to the one of its dual. As an application we determine the weight 
distribution of the parity check codes <J5 . In section 3 we determine the weight 
distribution of the Hamning codes f) m . This is done by extending the code to F q 
and by applying D els arte' s Theorem. In section 4 we study the BCH codes 23 m . 
This involves a family of supersingular elliptic curves over F g . We determine how 
often every isomorphism class occurs in the family, and this gives us the weight 
distribution of the codes 5B m . The calculation is a special case of the families of 
curves studied in [14]. Finally in section 5 we determine the weight distribution 
of the Melas codes 9Jl m . This time a family of non-supersingular elliptic curves 
over F q is involved. The weight distributions of the dual codes can be described 
in terms of certain class numbers of binary quadratic forms. An application of the 
Eichler-Selberg Trace Formula gives, in a somewhat mysterious way, the weight dis- 
tribution of Wl m . The result involves the traces of the Hecke operators T q acting 
on the cusp forms for the modular group Ti (4) . This is probably related to the 
fact that the curves in our family all admit a rational point of order 4, but we do 
not establish a direct connection. 

It would be very interesting to extend the methods of this paper to other families 
of cyclic codes. This seems difficult since it involves, in general, curves of genus 
larger than 1 and difficult questions about their moduli and their numbers of ra- 
tional points. See [14] where Reed-Muller codes are discussed from this point of 
view. 

2. The parity check codes 

Often the determination of the weight distribution of a code C goes together 
with the determination of the weight distribution of the dual code C . For in- 
stance, if C = C 1 - , i.e. if C is self dual, much can be said about the weight 
distribution of C . In this case there are beautiful connections with invariant the- 
ory and the theory of ^-functions. See [8, Ch. 19]. 
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Definition. Let CcFJ be a code. The dual code C 1 - is defined by 

C 1 = {veF;:(v,w)=0 for all w e C } 

where for v = (v\ , V2 , ■ ■ ■ , v n ) and w = (w\ , W2 , ■ ■ ■ , w n ) in F™ the scalar 
product (v , w) is defined by 

n 

( v > w > = ^2v i w l . 

i=l 

It is easily seen that the dual of C 1 - is the code C again. For example, the parity 
check code P and the repetition code are dual to one another. 

The following theorem gives, for binary codes, a relation between the weight 
distribution of the codes C and C 1 - . 

Theorem 2.2 (The Mac Williams Identities). Let C be a binary code of length n 
with weight distribution Wc(X) . Then 

n 

w c , (x) =—j2 mi xya + xr-\ 

Proof . For a function / on F£ we define its Fourier transform / by 
/>)= E (-l) <V ' W> /(w), for veF£. 

wGFJ 

Since X] v ec(~ -0^ V ' W ^ ^ s e 1 u8 ^ to #C or depending on whether w e C 1 - or 
not, one deduces the following inversion formula 

E/>)-# c E /( w )- 

vec wee 1 
We apply this to the function 

/(w)=Xl w l. 

One has that 

w c ,{x)= * |w| = ^E/>)- 

wee 1 ^ vec 

Since 

/(v)= J2 (-l) (v ' w> X |w| = (l-X) |v| (l+X)"- |v| , 

wGFJ 

the theorem follows easily. The last fact is proved by induction with respect to n . 
This completes the proof of the theorem. 

As an easy example, we determine the weight distribution of the parity check 
codes P. These codes are dual to the repetition codes which are easily seen to have 
the following weight enumerator 

W(X) = 1 + X n . 
By Theorem 2.1 we have therefore that 

W„P0 = 5 «1 -*)"+(! + *)") . 



, odd 
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a result which is also easily obtained directly. 

3. The Hamming codes 
Let m > 2 and q = 2 m . The Hamming code Sj m of length q — 1 is the 
ideal in the ring F 2 [T]/(T q ~ 1 — 1) generated by the polynomial f a (T) . Here 
faiT) € F 2 [T] denotes the minimum polynomial of a generator a of the multi- 
plicative group F* . As we explained in the introduction, we take the monomials 
1 , T , . . . , T q ~ 2 as a basis for the vector space F 2 [T]/{T q ~ 1 - 1) . We will sec 
below that the choice of a is not important. 

Proposition 3.1. The dimension of $j m is q — l — m and its minimum distance 
is 3. 

Proof. Since F 2 [T]/(/ a (T)) is a field of 2 m elements, the ideal £ m = (f a (T)) 
itself has 2 9 ~ 1 /2 m elements. Therefore the dimension of Sj m is q—l — m. 

Suppose h G $j m is a non-zero word of weight at most 2. In other words, 
h(T) = T a for some < a < q- 1 or h(T) = T a + T b for some 0<a<b<q-l. 
Since h(a) = , the first possibility cannot occur. In the second case we have 
a b-a _ ^ w hich is impossible since a has order q — 1 . Therefore the minimum 
distance is at least 3. 

This implies that the "unit balls" 

S(v) = {w e FlT 1 : |v- w| < 1} 

with "center" v £ $j m are mutually disjoint. Since each ball 5(v) has cardinality 
2 m , their union has cardinality #£ m 2 m = 2 q - 1 - ,n 2 m = 2 q - x . This is precisely the 
cardinality of the vector space F 2 [T]/(T 9 ~ 1 — 1) , and we conclude that the balls 
S(v) cover the vector space F 2 _1 . This easily implies that the minimum distance 
is actually equal to 3: the polynomial 1 + T is contained in a unit ball 5(v) for 
some code word v . Therefore 1 + T— v is a monomial T a for some a^O, 1 , and 
we see that T a + T+l = v is a code word of weight 3. This proves the proposition. 

Taking m — 3 and f a (T) = T 3 + T + 1 , one obtains the famous Hamming code 
of length 7 and dimension 4. Here is a complete list of all 16 vectors, with respect 
to the basis l,T, ... , T 6 : 
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To study the codes 9) m , we extend the base field to F q : 

F 2 [T]/(T q - 1 - 1) C F q [T}/ (T 9_1 - 1). 

Since the words in (T—a) are the polynomials a q - 2 T q ~ 2 + - ■ -+aiT+a n that vanish 
at a , we see that Sj m is the restriction of the ideal (T — a) C F 9 [T]/ (T 9_1 — 1) , 
i.e. 

9) m = (T-a)nF 2 [T]/(T q - 1 -l). 

It is easy to compute the dual of the F^-codc (T — a) . The polynomials in (T — a) 
are the vectors (oq , oi , . . . , CLq-2) that are orthogonal to (1 , a , a 2 , . . . , a q ~ 2 ) . 
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Since a generates F* , the latter vector has precisely all elements x £ F* as its 
coordinates. Therefore the F 9 -dual of (T — a) is given by 

(T - a)^ = {(Xx) xeF , :AeFJ. 

We note in passing that this dual code does not depend on a . Therefore, up to a 
permutation of the basis, the Hamming code $j m does not depend on the choice 
of a cither, but only on m . 

We wish to compute the weight distributions of the codes f) m , which themselves 
are the restrictions of the codes (T — a) . By the MacWilliams Identities, the 
following theorem reduces this to a study of the Trace code of (T — a) 1 - : 

Theorem 3.2 (Delsarte's Theorem). Let F q be an extension of F 2 , and let C 
be a code over F q . Then 

Tracc(C)- L =Rcs(C- L ), 

where Res(C ± ) is the restriction of C to F 2 and Trace(C) is the F 2 -code given 
by 

Tracc(C) = { Tr (v) : v e C}. 

F,/F 2 

Proof . By definiton v £ Trace(C)- L if and only if (v , Tr(w)) = for all w G C . 
Since v has coordinates in F 2 , this is equivalent to 

Tr((v, w)) =0 for all w G C . 

This is also true for Aw with A e F q instead of w . Since the trace is non- 
degenerate, we conclude therefore that the last statement is equivalent to (v , w) = 
for all w € C , i.e. to v e C 1 - and the proof is complete. 

So, we have the following situation: 



Res 

1 m < 


(T- 


-a) 


dual 




dual 


Trace 

'm < 


(T- 





Because of the simple description of (T — a) and (T — a) 1 - , we can compute the 
duals of the Hamming codes: by the discussion above and Delsarte's Theorem we 
have 

%i = {Tr(Az) xeF . : A e FJ. 

The cardinality of Sj^ is q . It is very easy to determine the weight distribution 
of ,f) x : for A = we get the zero word of weight and for A ^ we get a word 
of weight q/2 , because Ax runs through all non-zero elements of F q . 
By the MacWilliams Identities we have that 

Wsi m (x) = i ((i + xy- 1 + ( q - i)(i - xy' 2 (i + xy' 2 - 1 ) ■ 

explicitly, the number of code words in fi m of weight i is given by 

*-K( f ; 1 )^-^* 1 (V))- 
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The reader may verify that Ax = A 2 = and that A 3 = (q — l)(q — 2)/6, 
showing once more that the minimum distance of 9) m is 3. For large q , the main 
contribution to A t is ) ■ The other term is much smaller. 

4. The double error correcting BCH codes 
Let q = 2 m > 4 . We define the double error correcting BCH codes <B m to be 
the ideals in F2[T]/(T <? ~ 1 — 1) generated by f a (T)f a 'i(T) where a is a generator 
of F* . The codes % m are very classical. Their definition does not depend on the 
choice of a . The dimension of the codes % m is q — 1 — 2m and their minimum 
distance is 5. See [8, p. 201] for a proof. The smallest non-trivial example is the 
ideal generated by the polynomial 

T 8 + T 7 + T 6 + T 4 + 1 = (T 4 + T + 1)(T 4 + T 3 + T 2 + T + 1) 

in the ring F2 [T]/(T 15 — 1) . This code has length 15 and dimension 7. 

To determine the weight distributions of 25 m , we proceed as we did with the 
Hamming codes Sj m in the previous section. First, since a generates the multi- 
plicative group, a 3 is not a Galois conjugate of a . Therefore the code 23 m is the 
restriction of the ideal (T - a)(T - a 3 ) C F^T]/^- 1 - 1) 

» m 2^ (T-a)(T-a 3 ) 

dual dual 

T ^- c (T - a)(T - a 3 ) 1 - 

The polynomials in (T — a)(T — a 3 ) are precisely those that vanish in a and a 3 . 
Arguing as in the previous section, we conclude that (T — a)(T — a 3 ) 1 - is given by 

{(Aa; + fix 3 ) xeF , : A , /! G F q } 

and therefore, by Delsarte's Theorem, 

<B^ = {(Tr(Ax + F 3 )) ieF; : A , fi € FJ. 

We want to compute the weight distributions of the codes 03^ . We proceed as 
in [14]. Let va, m = (Tr(Aa; + [ix 3 )) xe F* be a word in OS -1 . Its weight is closely 
related to the number of rational points on the curve 

E: Y 2 - Y = XX + fiX 3 . 

Over F g : for x e F q one has that Tr(Aa; + fix 3 ) = if and only if there exists 
y G F q with y 2 — y = Xx + fix 3 . Therefore, taking care of the points (0,0), 
(0 , 1) , and the point at infinity, we have that 

|v AiM | = («-l)-i(#25(F,)-3). 

In retrospect we could say that, in a similar way, the Hamming codes of the previous 
section are related to the family of curves Y 2 — Y = vX , v € F q . Since these are 
all curves of genus 0, the calculation in section 3 was particularly simple. 

For A = fi = one obtains the zero word. If fi = and A 7^ , the curve E is 
a conic; this gives rise to q — 1 words of weight q — 1 — |(g + 1 — 3) = q/2 . 

When fi 7^ , the curve E has genus 1 . It is easily seen to be a supersingular 
elliptic curve. This means that it has no points of order 2 or, equivalently, that its 
ring of F2-endomorphisms is not commutative. See Deurings beautiful 1941 pa- 
per [2] for a discussion of supersingular elliptic curves. There is, up to isomorphism, 
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only one supcrsingular elliptic curve over F2 . It has equation Y +Y = X . Over 
F q there are more isomorphism classes. They are all isomorphic over F2 . The 
following proposition describes the situation. 

Proposition 4.1. Let F q be an extension of F 2 of degree m . If m is odd, 
there are, up to isomorphism, exactly 3 supersingular curves over F q . If m is 
even, there are, up to isomorphism, exactly 7 supersingular curves over F q . In 
the following tables they are sorted according to their number of points over F q . 
We also give the cardinality of their groups of F q -rational automorphisms: 



m odd 



m even 



*E{F q ) 


freq. 


#Aut F9 (£) 


q+1- 


1 


4 


9+1 


1 


2 


q+ 1 + 


1 


4 



*E{F q ) 


freq. 


#Aut F ,(£) 


q + l-2^q 


1 


24 


q + l-^q 


2 


6 


q + 1 


1 


4 


q + l + ^q 


2 


6 


q + l + 2^q 


1 


24 



Proof . See [2, 15, 11]. It is actually very easy to give explicit equations for the 
curves. For instance, when m is odd, the three curves are given by the equations 
Y 2 +Y = X 3 , Y 2 +Y = X 3 +X , and Y 2 +Y = X 3 +X + l with q+1, q+l±^ , 
and q + I + ^/2q rational points respectively. Here ± denotes (— l)( m _1 )/ 8 . We 
do not need these equations. 

Now we count how often an isomorphism class occurs in our set of curves: 

Proposition 4.2. Let E be a supersingular elliptic curve over F q . The number 
of curves in the family 

Y 2 +Y = \X + iiX 3 (A e F 9 , n e F*) 

that are isomorphic over F q to E , is equal to 

(q-l)(#E(F q )-l) 

#Aut F ,(£) 

Proof. If in the equation we replace X by pT x X and Y by [i~ x Y and then 
substitute A by Xfi^ 1 , our family of supersingular elliptic curves becomes 

Y 2 +fiY = X 3 + XX ( A <G F 9 , £i <E F* ). 

Let us fix one such curve E . A transformation of the form 

Y <- u 3 Y + rX + s, 
X <- u 2 X + t , 

with r , s , t g F q , mgF*, maps E to another curve in the family if and only if 

s 2 + [is = t 3 + Xt, 
t = u- i r 2 . 

There are (#E(F q ) — l)(q — 1) such transformations, and all the corresponding 
curves are isomorphic to E . Since all F 9 -automorphisms of E are also of this 
form, the number of curves in the family isomorphic to E is 

( g -l)(#ig(F q )-l) 
#Aut Fq (£) 
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Summing this over the isomorphism classes of E , we find, using Proposition 4.1, 
precisely q(q — 1) curves, i.e. we obtain all curves in the family. This proves the 
proposition. 

From Propositions 4.1 and 4.2 it is easy to obtain the weight distribution of the 
codes QSi: : 



to odd 


weight 


frequency 





1 


q+V^q 

2 




q 

2 




q-V^q 

2 





m even 



weight 


frequency 





1 


9+2^9 
2 




q+^q 

2 




q 

2 


g -^q+ (5-1) 


q-Vq 

2 


^(9 + V^) 


2 


^(9 + 2^) 



These distributions were already found in a different way by Kasami [5, 6]; see 
also [8, Ch. 8, sect. 7 and Ch. 15, sect. 4]. Applying the Mac Williams Identities, 
one obtains explicit formulas for the weight distributions of the BCH codes Q3 m 
themselves. We leave this calculation to the reader. 



5. The Melas codes 

In 1960 the Melas codes [9] were introduced by C. M. Melas, who worked for 
IBM. The definition of these codes is very similar to the one of the BCH codes. Let 
F q be an extension of F2 . Assume q — 2 m > 4 . The Melas codes are ideals in 
F 2 [T]/(T«- 1 -1) generated by f a (T) f a -i(T) where a is a generator of F* . The 
definition docs not depend on the choice of a . The dimension of the codes 97l m 
is q — 1 — 2m and their minimum distance is at least 3 or 5, depending on whether 
to is even or not. 

The smallest non-trivial example occurs for to = 4 . It is the ideal generated by 
the 15th cyclotomic polynomial (mod 2) 

$15 = T 8 + T 7 + T 5 + T 4 + T 3 + T + 1 = (T 4 + T + 1)(T 4 + T 3 + 1) 

in the ring F 2 [T]/(T 15 — 1) . The length of this code is 15 and its dimension is 7. 

We proceed as we did with the BCH codes 5B m in the previous section. 9Jl m is 
the restriction of the ideal (T - a)(T - a" 1 ) C ¥ q [T]/{Ti- 1 - 1) . We conclude, 
as in the previous section, that the F g -dual of this code is 

{(Ax + F _1 )xeF; : A , e F g } , 

and therefore, by Delsarte's Theorem, 

Tli = {(Tr(Ax + : A , fi e FJ. 

Let va. m = (Tr(Ax + M£ -1 ))a;eF* be a word in 9Jl^ . If A = \i = , we find 
the zero word. If only one of A , \l is zero, the code word has weight q/2 . There 
are 2q — 1 such words. In the remaining cases the weight is closely related to the 
number of rational points on the curve 

E: Y 2 -Y = XX + fiX- 1 



10 



RENE SCHOOF 



over F q . Multiplying the equation by \ 2 X 2 and replacing Y by X l Y and X 
by X^X , we find the equation of an elliptic curve 

E: Y 2 +XY = X 3 + v 2 X , 

where v is uniquely determined by v 2 = /iA e F* . Keeping in mind the points 
with X = and the point at infinity, one easily computes the weight of the 
corresponding code word 

|va,„I - (9 - 1) - \{*E{Y q ) 2) = «^1±* 

where f is defined by #E(F q ) = q + 1 — t . Let us also note that the point (y , 0) 
on E has order 4 in the group E(¥ g ) . 

To determine the weight distribution of the codes Wl- 1 , we must count how many 
curves E there arc in our family with a given number of points. We first compute 
that the j-invariant of Y 2 + XY = X 3 + v 2 X is equal to v~ A . This shows that 
for every non-zero j-invariant there is exactly one elliptic curve in the family and 
this elliptic curve is not supersingular. Up to isomorphism, there are exactly two 
elliptic curves over F q with j-invariant equal to . If one has q + 1 — t points 
over F q , the other has q+l + t such points. We can decide which curve occurs 
by observing that the point {y , 0) € E(F q ) has order 4. Therefore, the curve with 
q + 1 — t points, where t = q + 1 (mod 4) occurs. 

The following proposition describes how many elliptic curves there arc with a 
given number of points over F q . We consider only non-supersingular elliptic curves 
or, equivalently, curves with an even number of points. Proposition 5.2 has been 
known since the work of Deuring [2] . It involves certain class numbers. 

Definition. Let d e Z be a negative integer congruent to or 1 (mod 4) . The 
Kronecker class number H(d) is the cardinality of the set of SL 2 (Z)-orbits of 
positive definite binary quadratic forms aX 2 + bXY + cY 2 with a , b , c <G Z with 
discriminant b 2 — Aac equal to d . 
It is well known that 

H{d) = #{(a, b, c) e Z 3 : b 2 -Aac = d, \b\ < a < c and b > 

whenever |6| = a or a = c} . 

For a triple (a , b , c) that satisfies the conditions in the formula for H(d) we have 
that \d\ = 4ac-b 2 > 4a 2 - a 2 = 3a 2 and hence \b\ < a < ^\d\/3 . This shows 
that H(d) is finite. When d is not too large, the formula is suitable for calculating 
H(d) in practice. 



Table 5.1 
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H(d) 


-d 


H(d) 


-d 


H(d) 


-d 


H(d) 


-d 


H(d) 


3 


1 


23 


3 


43 


1 


63 


5 


83 


3 


4 


1 


24 


2 


44 


4 


64 


4 


84 


4 


7 


1 


27 


2 


47 


5 


67 


1 


87 


6 


8 


1 


28 


2 


48 


4 


68 


4 


88 


2 


11 


1 


31 


3 


51 


2 


71 


7 


91 


2 


12 


2 


32 


3 


52 


2 


72 


3 


92 


6 


15 


2 


35 


2 


55 


4 


75 


3 


95 


8 


16 


2 


36 


3 


56 


4 


76 


4 


96 


6 


19 


1 


39 


4 


59 


3 


79 


5 


99 


3 


20 


2 


40 


2 


60 


4 


80 


6 


100 


3 
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M(t) = 



Proposition 5.2. Let F q be an extension of F 2 . Let t € Z be an odd integer. 
The number M(t) of elliptic curves over F q up to isomorphism with q + 1 — t 
points is given by 

H(t 2 - Aq) , if \t\ < 2^q, 
otherwise. 
Proof . This is well known. One can find a proof in [2] or [15]. 

As a consequence we find the following weight distributions for the duals of the 
Melas codes [7]: the number of code words in 97t^ of weight (q + 1 — t)/2 is given 

by 

(q - l)H(t 2 -Aq), if t G Z {1}, t = q + 1 (mod 4) and t 2 < Aq; 

(q-l)(H(l-4q) + 2), if * = 1; 
1 , if t = q + 1 (the zero word) ; 

, otherwise. 
To obtain the weight distributions of the Melas codes themselves, we apply Theo- 
rem 2.2. The Mac Williams Identities give complicated formulas for the weights of 
the Melas codes, involving sums of the type J2t (* 2 - 4 <?) • Luckily the Eichler- 
Selberg formula for the traces of the Hecke operator T q acting on cusp forms for 
the congruence subgroup 

ri(4) = j ( ° J) e SL 2 (Z) : a = 1 (mod 4) and c = (mod 4) 

involves similar sums. 

Proposition 5.3 (Eichlcr-Selberg Trace Formula for Ti(4)) . Let m > 1 and 
q = 2 m . The trace of the Hecke operator T q acting on the space of cusp forms 
Sfc(ri(4)) of weight k > 2 is given by 

Tr{T q ) = -l + q- ^H(t 2 - Aq) = when k = 2, 

t 

= -1 - (-l) fc 9/2 Q k - 2 (t , q)H(t 2 - Aq) otherwise, 
t 

Here t runs over {t <E Z : t 2 < Aq , and t = q + 1 (mod 4)} . The Q K (t , n) are 
recursively defined by 

Qo(t, n) = 1 , 

Qi(t, n)=t, 

Q K+ i{t , n) = tQ K (t , n) - nQ K _ 1 (t , n) for k>1. 

One has that Q K (t, n) = (p K+1 — p K+1 )/{p — p) where p, p denote the zeroes of 
the polynomial X 2 — tX + n . 
Proof. Sec [10] or [3]. 

The group Ti (4) is closely related to the modular curve X\ (4) which parametrizes] 
elliptic curves together with a point of order 4. Since all curves in our family of 
elliptic curves admit a rational point of order 4, one would expect to find an ap- 
proach which is more direct than our method using the Mac Williams Identities and 
the Trace formula. 

Combining Proposition 5.3 with the MacWilliams Identities gives, after some 
elementary and tedious calculations, the following formula for the number A.i of 
words in the Melas code 9Jt m of weight i : 
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Theorem 5.4. 

i 

-(g-l) £ W^( g )(l + T, +2 (g)); 

i = 
J = i (mod 2) 

/iere i/ie polynomials Wi t j (q) are zero whenever j < or j > i . For < j < i 
and i = j (mod 2) they are defined by 

Wo,o = l, Wi,i = -1 

(j + l)W i+ i,j + i = -qWij+2 - - (q- i)Wi- ltj+1 ; 

^2/ t k(°) we denote for n > 3 tfte trace o/ f/ie Hecke operator T q on the space of 
cusp forms S K (Ti(4)) . For convenience we let r 2 (g) = — q . 

Using Theorem 5.4, it is not difficult to calculate the frequencies of the small 
weights. This has been done in [12]. The computation naturally splits into two 
parts: for even weights (in the sense of coding theory), one only encounters traces 
of Hecke operators acting on cusp forms of even weight (in the sense of modular 
forms). This involves only modular forms for the group r (4) . By means of the 
theory of Atkin and Lehner [1], one reduces the calculation to the computation of 
the traces of T q for the full modular group SZ^Z) . Similarly, for odd weights one 
encounters only cusp forms of odd weight. In this case cusp forms for the group 
r (4) with respect to the unique non-trivial character of conductor 4 arc involved. 
In this case all forms are "new" in the sense of Atkin and Lehner. We refer to [12] 
for the details and several explicit calculations. 
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